disable mongodb auth by default. fixes #325